338 matches found
CVE-2013-0355
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1, and EM DB Control 11.1.0.7, 11.2.0.2, and 11.2.0.3, allows remote attackers to affect integrity via unknown vectors related to...
CVE-2013-0373
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1, and 12.1.0.2 allows remote...
CVE-2012-3219
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.1 and 12.1.0.2 allows remote...
CVE-2013-0359
Unspecified vulnerability in the APM - Application Performance Management component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Business Transaction Management...
CVE-2012-3219
Oracle EM/Database Control Segment Advisor vulnerability (CVE-2012-3219) involves an arbitrary URL redirection/phishing flaw in the EM Segment Advisor page. Affected products match the CVE entry: Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.3...
CVE-2013-0359
CVE-2013-0359 affects the APM - Application Performance Management component in Oracle Enterprise Manager Grid Control (versions 6.5, 11.1, 12.1.0.2). The vulnerability is described as unspecified with impact to confidentiality, integrity, and availability via unknown vectors related to Business ...
CVE-2013-0396
Unspecified vulnerability in the Application Performance Management APM component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than...
CVE-2013-0352
Oracle CVE-2013-0352 describes a Cross‑Site Scripting vulnerability in Oracle Enterprise Manager components, specifically the EM Database Control/XML Database Resources page via the cancelURL parameter. An attacker could remotely exploit this to steal session cookies and impersonate a legitimate ...
CVE-2013-0354
CVE-2013-0354 affects Oracle Enterprise Manager Grid Control EM Base Platform 10.2.0.5 and EM DB Control 11.1.0.7, 11.2.0.2, 11.2.0.3. The TeamSHATTER advisory documents a HTTP Response Splitting vulnerability in policyViewSettings that is remotely exploitable; an attacker convincing a valid user...
CVE-2013-0358
CVE-2013-0358 is supported by a TeamSHATTER advisory detailing a SQL Injection in Oracle Enterprise Manager (Resource Manager) affecting OEM Database Control 10.2.0.3/10.2.0.4/10.2.0.5, 11.1.0.7, 11.2.0.2/11.2.0.3 and EM Plugin for DB 12.1.0.1/12.1.0.2. The issue arises from vulnerable parameters...
CVE-2013-0373
CVE-2013-0373 affects Oracle Enterprise Manager products: EM Base Platform 10.2.0.5 and 11.1.0.1; EM Database Control 10.2.0.3/4/5, 11.1.0.7, 11.2.0.2/3; and EM Plugin for DB 12.1.0.1/12.1.0.2. The vulnerability is SQL Injection in the OEM streams queue path, enabling remote exploitation to execu...
CVE-2013-0360
Technical details for CVE-2013-0360 are not publicly disclosed in the provided documents. Monitor for updates; no affected product/version, exploit info, vectors, or remediation are specified here.
CVE-2013-0360
Unspecified vulnerability in the Application Performance Management APM component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than...
CVE-2013-0355
The CVE-2013-0355 issue corresponds to a cross-site scripting vulnerability in Oracle Enterprise Manager components (EM Base Platform and EM DB Control) affecting versions 11.1.0.7, 11.2.0.2, and 11.2.0.3, related to the Distributed/Cross DB Features. The TeamSHATTER advisory documents a remote-e...
CVE-2012-1737
Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Enterprise Manager Grid Control EM Base Platform 10.2.0.5, EM Base Platform 11.1.0.1, EM Plugin for DB 12.1.0.1, and EM Plugin for DB 12.1.0.2, allows...
CVE-2012-0526
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5, allows remote attackers to affect integrity via unknown vectors related to...
CVE-2012-0520
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2, and in Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1, allows remote attackers to affect integrity via unknown vectors related ...
Design/Logic Flaw
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5, allows remote attackers to affect integrity via unknown vectors related to...
Design/Logic Flaw
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5, allows remote attackers to affect integrity via unknown vectors related to...
CVE-2012-0527
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5, allows remote attackers to affect integrity via unknown vectors related to...